Raze

Account takeover POC - Shamim H1

[Raze @HashKeyGroupCHI]

🎯 Bug Bounty Videos a Thread 🧵

[Raze @HashKeyGroupCHI]

@hacck3y Mail to principal? Or go meet yourself?

[Raze @HashKeyGroupCHI]

@ngosytuanbug @smokie_7 Was it on the main page of the domain? Or where was the link, and which link was broken?

[Raze @HashKeyGroupCHI]

@IamGokulesh @owasp is this talk uploaded somewhere?

[Raze @HashKeyGroupCHI]

@TeslaTheGod drop some fresh tips too : )

[Raze @HashKeyGroupCHI]

@0xMstar 500 million 😶

[Raze @HashKeyGroupCHI]

@wanahmadqais007 750 x 3 is 2250 Right?? what are you saying here? (~37100$ means? )

[Prashant Bhushan @pbhushan1]

#CockroachJantaParty

[Kapil @kapsology]

Cockroaches are getting fearless 🫡

[Raze @HashKeyGroupCHI]

@Purehindu321 @IndianGems_ Yup for real there is i guess no work which can be done without bribe involved in it 🥲 really disappointed with this

[Raze @HashKeyGroupCHI]

@shivangmauryaa You won't believe in our masters time some of our friends created a fake company details and done a Intership and even got passed without any issues 🤡🤡😂

[Raze @HashKeyGroupCHI]

@the_IDORminator Earlier same program same company on Bugcrowd I would get reply around in a week for sure but now minimum is like 2+ weeks🥲 like first reply in 2 weeks then another comment in 2 weeks🤡🤡🤡 it's like report and forget 🤡🤡🤡🤡🤡

[Raze @HashKeyGroupCHI]

@zack0x01_ Something like js monitoring for changes but using local storage like local hard-disk for changes monitoring in js , something on this 🤔🤔

[Raze @HashKeyGroupCHI]

@zack0x01_ How to get Js urls is very common I want something like after getting a bunch of Js urls and not just regexes apart from regexes what to do with those js urls

[Asma @asmatasleem13]

The beginning of the end.

We will make him sit in Opposition in 2029 .

[Raze @HashKeyGroupCHI]

@SadatTamzit Ohh if this is true then happy for you ❤️‍🔥🎉

[Raze @HashKeyGroupCHI]

@Lovely92698976 Obviously it's India 👍🤡

[Raze @HashKeyGroupCHI]

@rez0__ @Zaddyzaddy @Bugcrowd It's an BXSS p2 as per platform, any idea what am I suppose to do

[Raze @HashKeyGroupCHI]

@rez0__ @Zaddyzaddy @Bugcrowd One of my report I have added a video poc 2 times, more than months passed it's still in not reproducible form by Bugcrowd triagers , I even used request a response feature still no response I tried bugcrowd support they said to use req a response 🤡 which I already did 🤡

[Raze @HashKeyGroupCHI]

@Mans4Hack this one?